REMARKS 



This Amendment is in response to the Office Action of November 1 8, 
2002. Applicants respectfully submit that all the claims presently on file are 
In condition for allowance, which action is earnestly solicited. 



REJECTION UNDER 325 USC 103 

Claims 1-17 are rejected under 35 U.S.C. 103 (a) as being unpatentable 
over He et al. (U.S. Pat. No. 6,088,451) in view of Hess et al. (U.S. Pat. No. 
5,471 ,670). In support of this position. Applicants submit the following 
arguments: 

A. Legal Standards for Obviousness 



The following are court opinions set the general standards in support of 
Applicant's position of non-obviousness, with emphasis added for added 
clarity: 



• " Obviousness cannot be established by combining the teachings of the 
prior art to produce the claimed invention, absent sonne teaching or 
suaaestion supporting the combination." In re Fine, 837 F.2d at 1075, 5 
USPQ2d at 1598 (citing ACS Hasp. Sys. v. Montefiore Hasp., 732 F.2d 
1572, 1577, 221 USPQ 929, 933 (Fed. C/r. 1984)). What a reference 
teaches and whether it teaches toward or awav from the claimed 
Invention are questions of fact. See Rayttieon Co. v. Roper Corp., 724 
F.2d 951, 960-61, 220 USPQ 592, 599-600 (Fed. Cir. 1983), cert, denied, 469 
U.S. 835, 83 L Ed. 2d 69, 105 S. Ct. 127 (1984). " 

• "When a rejection depends on a combination of prior art references, 
there must be some teaching, suggestion, or motivation to combine the 
references. See In re Geiger, 815 F.2d 686, 688, 2 USPQ2d 1276, 1278 
(Fed. Cir. 1987)." . 
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• "With respect to core factual findings in a determination of 
patentability, however, the Board cannot simply reach conclusions 
based on its own understandina or experience -- or on its assessment of 
what would be basic knowledge or common sense. Rattier, the Board 
must point to some concrete evidence in the record in support of these 
findings." See In re Zurko, 258 F.3d 1379 (Fed. Cir. 2001). 

• "We have noted that evidence of a suggestion, teaching, or motivation 
to combine may flow from the prior art references themselves, the 
knowledge of one of ordinary skill in the art, or, in some cases, from the 
nature of the problem to be solved, see Pro-Mold & Tool Co. v. Great 
Lakes Plastics, Inc., 75 F.3d 1568, 1573, 37 USPQ2d 1626, 1630 (Fed. Cir. 
1996), Para-Ordinance Mfg. v. SGS Imports Intern., Inc., 73 F.3d 1085, 
1088, 37 USPQ2d 1237, 1240 (Fed. Cir. 1995), although "the suggestion 
more often comes from the teachings of the pertinent references," 
Rouffet, 149 F.3d at 1355, 47 USPQ2d at 1456. The range of sources 
available, however, does not diminish the requirement for actual 
evidence. That is, the showing must be clear and particular . See, e.g., 
C.R. Bard, 1 57 F.3d at 1 352, 48 USPQ2d at 1 232. Broad conclusorv 
statements regarding the tegching of multiple references, stonding 
glone. ore not "evidence." E.g., McElmurry v. Arkansas Power & Light 
Co., 995 F.2d 1576, 1578, 27 USPQ2d 1 129, 1 131 (Fed. Cir. 1993) ("Mere 
denials and conclusory statements, however, are not sufficient to 
establish a genuine issue of material fact."); In re Sichert, 566 F.2d 1 154, 

1 164, 196 USPQ 209, 217 (CCPA 1977)." See In re Dembiczak, 175 F. 3d 
994 (Fed. Cir. 1999). 

• "To prevent the use of hindsight based on the invention to defeat 
patentability of the invention, this court reouires the examiner to show a 
motivation to combine the references that create the case of 
obviousness. In other words, the examiner must show reasons that the 
skilled artisan, confronted with the same problems as the inventor and 
with no knowledge of the claimed invention, would select the elements 
from the cited prior art references for combination in the manner 
claimed " See In re Rouffet, 149, F.3d 1350 (Fed. Cir. 1998). 
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B. Summary of the Present Invention 



Prior to discussing the merit of the obviousness rejection under 35 U.S.C. 
103, it might be desirable to review a summary of the present invention and 
some of the features provided thereby. The present svstem (or method) 
introduces the concept of "implicit logoff" , which is a secure log-off 
procedure that can be used in addition to the conventional express log-off 
and cookie termination. 

The implicit log-off procedure presents numerous advantages over the 
conventional termination or logoff procedures, in that it reduces the risk to 
a user resulting from choosing an insecure site while logged onto a secure 
site . Users are provided with pop up warnings on their monitors, alerting 
them to the unattended pending connection to the secure site. The implicit 
log-off procedure further mitigates the risk of losing control of private 
informotion os the result of a session that has not been appropriately 
terminated by the user. In addition, the implicit log-off procedure reduces 
the business costs associated with a non-productive, secure session , and 
avoids undesirable loa-offs bv providing to the user gppropriate warnings . 

The implicit log-off procedure provides on gdd-on notification module 
to the user's browser that is completely transparent to the user, sends a 
message to the ebusiness server notifying it that the client is no longer 
actively involved in a secure, online transaction. This notification mav result 
from total inactivity on the part of the client, from the client's choice of 
another site or page that is not secure, or from simpiv leaving the secure 
site. 
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In use, the user visits a website of a business using a web browser. At 
some point, tine user enters a secure region through log-in. At this point, the 
browser begins to track the user's activity. Subsequently, one of the 
following events may occur: 

a) The user selects a new URL . If this URL is a secure region within the 
same business site , the warning system remains dormant pursuant to 
the e-business site administrator policy or discretion. 

b) The user selects a new URL . If this URL is outside the business space , 
such as for example the URL of another business, the system may be 
configured to bring up a warning pop-up window on the user's 
monitor, informing the user that he or she is leaving the security zone. 
The user is given the opportunity to log off from the secure 
connection. 

c) The user selects a non-secure reaion of the same business site . The 
system may optionally warn the user. Repeated warnings to the user 
can cause annoyance and, hence, the system allows the user to turn 
off these warnings. 

d) The user may enter a period of inactivity within the secure site . After a 
preset duration the warning system brings up a pop-up window to 
warn the user that he or she should continue the transaction, log off, 
or set the time out duration to a period of his or her own choice. 
Should the client fail to respond in a pre-determined time the system 
may log off the user. 

C. Claims 1. 2. 3. 5-13. and 15-17 

The office action bases its rejection on the ground that regarding 
"claims 1, 2, 3, 5-13, and 15-17 He discloses a system/method for securing 
access to network elements by user elements, wherein the network 
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elements and the user elennents are coupled to a network. A network 
security server coupled to the network security to control access to the 
network elennents and protec network resources and infornnation (which is 
seen to read as Applicant's claimed invention wherein it is stated that a 
system for assisting a user conducting a transaction on a secure site of a 
server to implicitly logoff), comprising: 
the server including: 

a secure transaction protection module that tracks a user's access state to 
the server (see., abstract, lines 7-13, fig 2, please note that user credentials 
or privileges also include Web site); 

a database in communication with the secure transaction protection 
module, for storing data to be accessed by the user (see., abstract, lines 
14-16, col 2, lines 12-34); 

an identification module for validating the user's access to the database 
(see., abstract, line 7-13, col 2, lines 12-34); and 
a notification module for notifying the secure transaction protection 
module of a user's request to initiate a session on the server (see., col 31 , 
lines 3038). 

It 1$ to be noted that He does not explicitly disclose wherein if the user 
exifslts the secure site, the notification module sends a message to the 
secure transaction protection module for implicitly loggino off the user from 
the secure site (which is interpreted as id the user exits its initial site notify 
the central controller." Emphasis added. 

Applicants respectfully traverse this rejection and submit that the claims 
on file are not obvious in view of He, and are patentable thereover. 
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First Argument 



APDlicants agree w ith the examiner that He does not explicitly disclose 
ihe following element of claim 1 : 

" wherein if the user exits ttie secure site, ttie notification 
module sends a message to the secure transaction protection 
module for implicitly logging off the user from the secure site." 

It should be clear that this element which is missing from He is a very 
important step for the implicit logoff procedure, as described earlier (refer 
to the Summary of the Invention above), as this is the step that renders the 
implicit logoff procedure viable accordina to the teaching of the present 
invention . Thus, the fgct that this important step is missing from the He is by 
itself a clear indication that the office gction hos not estoblished a prime 
facie obviousness rejection . Therefore, Applicants respectfully request that 
this rejection be withdrawn and the claims allowed. 

Second Argument 

The office action bases the rejection of claims 1 , 2, 3, 5-13, and 1 5-1 7 on 
a single reference, namely He, which admittedly is lacking the foregoing 
important step. The only ground offered to fill in the missing gap is as 
follows: " which is interpreted as id the user exits its initial site notify the 
central controller ." 

To the best of Applicants' understanding of this rejection ground 
(though no admission is made herein), when the user exists the secure site, 
the central controller is notified. However, the office action does not 
address the existence of a secure transaction protection module that 
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implicitly logs off the user from the secure site in response to the user exiting 
the secure site. 

The absence of such an important elennent, coupled with the lacl< of 
justification, does not support a prime facie case of obviousness. Applicants 
respectfully request that the rejected claims be allowed. 

Third Argument 

The term "implicit log-off" was coined in the present application for the 
purpose of describing the functionality of the invention, as follows: "implicit 
log-off [at step 330, which] means that the client will implicitly send the log- 
off message event to the server 1 5 without the user explicitly choosing the 
logout option ." Emphasis added. 

Since the term "implicit log-off" was clearly defined by Applicants, it 
would not be permissible for the Examiner to redefine this term in hind-sight , 
in order to justify a rejection ground. As an example, the fact that the user 
has left the initial site and the central controller is notified, does not imoiv 
that the user will be automatically and imolicitlv loaaed off, as described in 
the present application. 

Applicants reiterate that He does not describe the implicit loa-off 
procedure as described in the present application, and as recited in the 
claims. Consequently, Applicants respectfully request that the rejected 
claims be allowed. 
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Fourth Argument 



He does not disclose the elements of clainn 1 nor the following element 
of claim 3: "wherein the secure transaction protection module sends a 
warning message to the user that the session will be terminated , and 

provides the user with the option to set the time to termination." 

The lack of disclosure of this step, without a supporting rejection ground 
necessarily renders claim 3 allowable over He, which allowance is 
respectfully requested. 

Fifth Argument 

He does not disclose the elements of claim 1 nor the following element 
of claim 5: "wherein the secure site is a web site with an address; and 
wherein the user exits the secure site bv transiting to another address ." 

He does not disclose the fact that when the user transits from a secure 
site to another address, the implicit log-off procedure is initiated, as recited 
in claim 5. Therefore, claim 5 is allowable over He, which allowance is 
respectfully requested. 

Conclusion 

Claims 1 , 2, 3, 5-1 3, and 1 5-1 7 are not obvious in view of He, and the 
allowance of these claims is earnestly solicited. 
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D. Claims 4 and 14 



The office action bases its rejection on tine ground that cookies are 
known (which fact is acknowledged by Applicants), and that "Hess 
discloses a multiple site communication system/method for determining 
when to hand off a communication. When the communication exits its 
initial site notify the central controller (see., abstract, col 5, lines 13-29). 
Therefore, it would have been obvious to a person of ordinary skill in the art 
at the time the invention was made to modify the network security of He by 
including the limitation detailed above as taught by Hess because such 
modification would monitor and identify the communication resources that 
the communication unit monitors." 

Applicants respectfully submit that claims 4 and 14 are allowable for 
depending on the independent claims 1 and 1 1 , respectively, as presented 
above. 

In addition, since there is no clear teaching, suggestion, or motivation in 
either He or Hess for combining the teachings of these two references, the 
law clearly does not support the hypothetical combination of these 
references. The motivation that "such modification would monitor and 
identify the communication resources that the communication unit 
monitors" is not, by itself sufficient to justify the hind-sight combination of 
these two references. 

Furthermore, it is not clear from the hvpothetical combination what the 
result of the monitoring would be . For the rejection ground to be justified, 
the combined teaching of the two references, should at the very least (no 
admission is made herein) indicate that the implicit log-off procedure be 
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implemented. No such loa-off procedure would be implemented bv the 
hypothetical combination of the two references. 

As a result, the combination of He and Hess does not warrant an 
obviousness rejection, and the allowance of these claims is respectfully 
requested. 

TELEPHONE INTERVIEW 

Should Examiner persists on rejecting the claims as amended. Applicants 
respectfully request a telephone interview to discuss claim 1 in view of the 
He reference. 

CONCLUSION 

All the claims presently on file in the present application are in condition 
for immediate allowance, and such action is respectfully requested. If it is 
felt for any reason that direct communication would serve to advance 
prosecution of this case to finality, the Examiner is invited to call the 
undersigned at the below-listed telephone number. 



Date: January 1 1 , 2003 




Samuel A. Kassatly Law Office 



6819 Trinidad Drive 
San Jose, CA 95120 
Tel: (408) 323-5111 
Fax: (408) 323-5112 



Samuel A. Kassatly 
Attorney for Applicant 
Reg. No. 32,247 
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